Ragic vulnerabilities
We track 6 vulnerabilities in Ragic products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on December 22, 2025.
Latest Ragic vulnerabilities
- 9.8 Critical severity
Enterprise Cloud Database: Use of Hard-coded Cryptographic Key
Enterprise Cloud Database developed by Ragic has a Hard-coded Cryptographic Key vulnerability, allowing unauthenticated remote attackers to exploit the fixed key to generate verification information and log into the system as any user.
- 7.5 High severity
Enterprise Cloud Database: Relative Path Traversal
Enterprise Cloud Database developed by Ragic has a Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files.
- 7.2 High severity
Enterprise Cloud Database: Unrestricted Upload of File with Dangerous Type
Enterprise Cloud Database developed by Ragic has an Arbitrary File Upload vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.
- 9.8 Critical severity
Enterprise Cloud Database: Unrestricted Upload of File with Dangerous Type
Enterprise Cloud Database from Ragic does not properly validate the file type for uploads. Attackers with regular privileges can upload a webshell and use it to execute arbitrary code on the remote server.
- 9.8 Critical severity
Enterprise Cloud Database: Missing Authentication for Critical Functionality
Enterprise Cloud Database from Ragic does not authenticate access to specific functionality, allowing unauthenticated remote attackers to use this functionality to obtain any user's session cookie.
- 7.5 High severity
Enterprise Cloud Database: Improper Limitation of a Pathname to a Restricted Directory
Enterprise Cloud Database from Ragic does not properly validate a specific page parameter, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files.